Resubmissions
13/08/2024, 23:59
240813-31qn6ssana 3Analysis
-
max time kernel
30s -
max time network
19s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
13/08/2024, 23:59
General
-
Target
binder.exe
-
Size
1.2MB
-
MD5
32b7fdb92f748d373a4578af47e063df
-
SHA1
347cbb5bc1e16f60230b445ce9ed879f2210a4b7
-
SHA256
82f9113b1cb88a9c9822c58f96a98332a8eb0f830a4cdbfcd79763f6165df14b
-
SHA512
302596a9942858b4a885a60744311fccc302e7fe354e464d97704eca8df71ea4c1a9fadbebcce6f4409afe44ae430a365056653e0a56468d7989fe18d99ded97
-
SSDEEP
24576:yEqYy2vg041qFrGsZPUaEI7n3eWbn8/XXQGGH8BTLxeX1fiYM4Qe6fqh8:yEqFcg041qFrGsZPUaEI7n3eWbn8vAfe
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\binder.exe"C:\Users\Admin\AppData\Local\Temp\binder.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵